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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1. (currently amended) An electronic control unit comprising a first 
computer and a second computer and outputting a control signal for an object of control 
based on a predetermined detection signal, the first computer comprising: 

an operation routine unit operable to operate the control signal based on the 
predetermined detection signal in accordance with a logic function; 

a determination routine unit operable to, in order to check an abnormal state of a 
the logic function for operating the control signal bas e d on the predetermined detection 
Sffffta k)f the operation routine unit , operate a dummy control signal by using dummy data 
stored in advance in accordance with the logic function and to determine whether or not a 
relationship between the dummy control signal and an expected value of the dummy 
control signal, which expected value is stored with respect to the dummy data in advance, 
is normal; and 

a transmission unit operable to transmit the dummy control signal and the 
expected value thereof that are used in a determination routine by the determination 
routine unit to the second computer; 

the second computer comprising: 

a receiving unit operable to receive the dummy control signal and the expected 
value thereof; and 
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a monitor routine unit operable to compare the dummy control signal and the 
expected value thereof received by the receiving unit so as to perform a calculation 
routine for calculating monitor data for monitoring whether or not a result of the 
determination routine by the determination routine unit is correct; 

the electronic control unit further comprising: a fail-safe routine unit operable to 
perform a fail-safe routine based on the determination result by the determination routine 
unit and the monitor data by the monitor routine unit. 

2. (original) The electronic control unit according to claim 1, wherein 

the logic function includes a first logic function for operating the control signal 
based on the predetermined detection signal and a second logic function, for operating a 
simplified control signal based on the predetermined detection signal, and 

the determination routine unit further determines whether or not a relationship 
between the control signal operated in accordance with the first logic function and the 
simplified control signal operated in accordance with the second logic function is normal. 

3. (original) The electronic control unit according to claim 2, wherein 

the determination routine unit inputs the dummy data to the second logic function 
to operate a dummy simplified control signal and determines whether or not a 
relationship between the dummy simplified control signal and an expected value thereof 
is normal. 
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4. (currently amended) An electronic control unit comprising a first 
computer and a second computer and outputting a control signal for an object of control 
based on a predetermined detection signal the first computer comprising: 

a determination routine unit operable to, in order to check an abnormal state of a 
logic function for operating the control signal based on the predetermined detection 
signal, operate a dummy control signal by using dummy data stored in advance in 
accordance with the logic function and to determine whether or not a relationship 
between the dummy control signal and an expected value of the dummy control signal, 
which expected value is stored with respect to the dummy data in advance, is normal; and 

a transmission unit operable to transmit the dummy control signal and the 
expected value thereof that are used in a determination routine by the determination 
routine unit to the second computer; 

the second computer comprising: 

a receiving unit operable to receive the dummy control signal and the expected 
yalue thereof; and 

a monitor routine unit operable to compare the dummy control signal and the 
expected value thereof received by the receiving unit so as to perform a calculation 
routine for calculating monitor data for monitoring whether or not a result of the 
determination routine by the determination routine unit is correct; 

wherein the electronic control unit further comprises: a fail-safe routine unit 
operable to perform a fail-safe routine based on the determination result by the 
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determination routine unit and the monitor data by the monitor routine unit: 

the logic function includes a first logic function For operating the control signal 
based on the predetermined detection signal and a second logic function, for operating a 
simplified control signal based on the predetermined detection signal; 

the determination routine unit further determines whether or not a relationship 
between the control signal operated in accordance with the first logic function and the 
simplified control signal operated in accordance with the second logic function is normal; 
and 

The e lectronic control unit according to claim 2, wherein the transmission unit 
transmits the control signal and the simplified control signal, as well as the dummy 
control signal and the expected value thereof, to the second computer, and the monitor 
routine unit further compares the control signal with the simplified control signal to 
perform a calculation routine for calculating the monitor data for monitoring whether or 
not a result of the determination routine in the determination routine unit is correct. 

5. (currently amended) An electronic control unit comprising a first 
computer and a second computer and outputting a control signal for an object of control 
based on a predetermined detection signal, the first computer comprising: 

a determination routine unit operable to, in order to check an abnormal state of a 
logic function for operating the control signal based on the predetermined detection 
signal, operate a dummy control signal by using dummy data stored in advance in 
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accordance with the logic function and to determine whether or not a relationship 
between the dummy control signal and an expected value of the dummy control signal, 
which expected value is stored with respect to the dummy data in advance, is normal; and 

a transmission unit operable to transmit the dummy control signal and the 
expected value thereof that are used in a determination routine by the determination 
routine unit to the second computer; 

the second computer comprising: 

a receiving unit operable to receive the dummy control signal and the expected 
value thereof; and 

a monitor routine unit operable to compare the dummy control signal and the 
expected value thereof received by the receiving unit so as to perform a calculation 
routine for calculating monitor data for monitoring whether or not a result of the 
determination routine by the determination routine unit is correct; 

wherein the electronic control unit further comprises: a fail-safe routine unit 
operable to perform a fail-safe routine based on the determination result by the 
determination routine unit and the monitor data by the monitor routine unit; 

The electronic control unit according to claim 1, wherein a plurality of types of 
the dummy data are prepared; 

when the determination routine unit determines that the relationship between the 
dummy control signal and the expected value thereof is normal, the determination routine 
unit repeats the determination routine while changing the plurality of types of dummy 
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data; and 

when the determination routine unit determines that the relationship between the 
dummy control signal and the expected value thereof is abnormal in the previous 
determination routine, the determination routine unit operates the dummy control signal 
by using the same dummy data as that used in the previous determination routine and 
determines whether or not the relationship between the thus calculated dummy control 
signal and the expected value thereof is normal again. 

6. (currently amended) An electronic control unit comprising a first 
computer and a second computer and outputting a control si gnal for an object of control 
based on a predetermined detection signal the first computer comprising: 

a determination routine unit operable to, in order to check an abnormal state of a 
logic function for operating the control signal based on the predetermined detection 
signal operate a dummy control signal by using dummy data stored in advance in 
accordance with the logic function and to determine whether or not a relationship 
between the dummy control signal and an expected value of the dummy control signal 
which expected value is stored with respect to the dummy data in advance, is normal; and 

a transmission unit operable to transmit the dummy control signal and the 
expected value thereof that are used in a determination routine by the determination 
routine unit to the second computer; 

the second computer comprising: 
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a receiving unit operable to receive the dummy control signal and the expected 
value thereof; and 

a monitor routine unit operable to compare the dummy control signal and the 
expected value thereof received by the receiving unit so as to perform a calculation 
routine for calculating monitor data for monitoring whether or not a result of the 
determination routine by the determination routine unit is correct; 

wherein the electronic control unit further comprises: a fail-safe routine unit 
operable to perform a fail-safe routine based on the determination result by the 
determination routine unit and the monitor data by the monitor routine unit; 

The electronic control unit according to claim 1, wh e rein in a case where it is 
determined, in the determination by the determination routine unit whether the 
relationship between the dummy control signal and the expected value thereof is normal 
or abnormal, that the relationship is abnormal a predetermined number of times, or in a 
case where the monitor data indicating that the determination routine by the 
determination routine unit is to determine that the relationship between the dummy 
control signal and the expected value thereof is abnormal is calculated in the monitor 
routine unit a predetermined number of times, the abnormal state of the determination 
routine is settled and the fail-safe routine unit performs different fail-safe routines before 
and after settlement of the abnormal state, respectively. 

7. (original) The electronic control unit according to claim 6, wherein 
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the fail-safe routine allows the output of the control signal to the object of control 
before the settlement of the abnormal state, and prohibits the control of the object of 
control by the control signal after settlement of the abnormal state. 

8. (currently amended) An electronic control unit comprising a first 
computer and a second computer and outputting a control signal for an object of control 
based on a predetermined detection signal the first computer comprising: 

a determination routine unit operable to, in order to check an abnormal state of a 
logic function for operating the control signal based on the predetermined detection 
signal, operate a dummy control signal by using dummy data stored in advance in 
accordance with the logic function and to determine whether or not a relationship 
between the dummy control signal and an expected value of the dummy control signal, 
which expected value is stored with respect to the dummy data in advance, is normal; and 

a transmission unit operable to transmit the dummy control signal and the 
expected value thereof that are used in a determination routine by the determination 
routine unit to the second computer; 

the second computer comprising: 

a receiving unit operable to receive the dummy control signal and the expected 
value thereof; and 

a monitor routine unit operable to compare the dummy control signal and the 
expected value thereof received by the receiving unit so as to perform a calculation 
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routine for calculating monitor data for monitoring whether or not a result of the 
determination routine by the determination routine unit is correct; 

wherein the electronic control unit further comprises: a fail-safe routine unit 
operable to perform a fail-safe routine based on the determination result by the 
determination routine unit and the monitor data by the monitor routine unit; 

the logic function includes a first logic function for operating the control signal 
based on the predetermined detection signal and a second logic function, for operating a 
simplified control signal based on the predetermined detection signal; 

the determination routine unit further determines whether or not a relationship 
between the control signal operated in accordance with the first logic function and the 
simplified control signal operated in accordance with the second logic function is normal; 
and 

The electronic control unit according to claim 2, wherein in a case where the 
determination routine unit determines that the relationship between the control signal and 
the simplified control signal is not normal, or in a case where the monitor routine unit 
calculates the monitor data indicating that it is to be determined in the determination 
routine by the determination routine unit that the relationship between the control signal 
and the simplified control signal is abnormal, when the determination routine unit 
determines that the relationship between the dummy simplified control signal and the 
expected value thereof is normal and the monitor routine unit calculates the monitor data 
indicating that it is to be determined in the determination routine by the determination 
routine unit that the relationship between the dummy simplified signal and the expected 
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value thereof is normal, the fail-safe routine unit performs a fail-safe routine for 
controlling the object of control using the simplified control signal. 

9. (new) The electronic control unit according to claim 4, wherein 

the determination routine unit inputs the dummy data to the second logic function 
to operate a dummy simplified control signal and determines whether or not a 
relationship between the dummy simplified control signal and an expected value thereof 
is normal 

10. (new) The electronic control unit according to claim 5, wherein 

the logic function includes a first logic function for operating the control signal 
based on the predetermined detection signal and a second logic function, for operating a 
simplified control signal based on the predetermined detection signal, and 

the determination routine unit further determines whether or not a relationship 
between the control signal operated in accordance with the first logic function and the 
simplified control signal operated in accordance with the second logic function is normal. 

11. (new) The electronic control unit according to claim 10, wherein 

the determination routine unit inputs the dummy data to the second logic function 
to operate a dummy simplified control signal and determines whether or not a 
relationship between the dummy simplified control signal and an expected value thereof 
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is normal. 

12. (new) The electronic control unit according to claim 6, wherein 

the logic function includes a first logic function for operating the control signal 
based on the predetermined detection signal and a second logic function, for operating a 
simplified control signal based on the predetermined detection signal, and 

the determination routine unit further determines whether or not a relationship 
between the control signal operated in accordance with the first logic function and the 
simplified control signal operated in accordance with the second logic function is normal. 

13. (new) The electronic control unit according to claim 12, wherein 

the determination routine unit inputs the dummy data to the second logic function 
to operate a dummy simplified control signal and determines whether or not a 
relationship between the dummy simplified control signal and an expected value thereof 
is normal. 

14. (new) The electronic control unit according to claim 8, wherein 

the determination routine unit inputs the dummy data to the second logic function 
to operate a dummy simplified control signal and determines whether or not a 
relationship between the dummy simplified control signal and an expected value thereof 
is normal. 
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15. (new) A method of controlling an electronic control unit having at least a 
first computer and a second computer to output a control signal for an object of control 
based on a predetermined detection signal, the method comprising: 

operating the first computer to: 

operate the control signal based on the predetermined detection signal in 
accordance with a logic function; 

in order to check an abnormal state of the logic function, operate a dummy 
control signal by using dummy data stored in advance in accordance with the 
logic function and determine whether or not a relationship between the dummy 
control signal and an expected value of the dummy control signal, which expected 
value is stored with respect to the dummy data in advance, is normal; and 

transmit the dummy control signal and the expected value thereof that are 
used in a determination routine by the first computer to the second computer; 

operating the second computer to: 

receive the dummy control signal and the expected value thereof; and 

compare the received dummy control signal and the expected value so as 
to perform a calculation routine for calculating monitor data for monitoring 
whether or not a result of the determination routine by the first computer is 
correct; 

performing a fail-safe routine based on the determination result by the first 
computer and the monitor data by the second computer. 
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16. (new) The method according to claim 15, wherein 

the logic function includes a first logic function for operating the control signal 
based on the predetermined detection signal and a second logic function, for operating a 
simplified control signal based on the predetermined detection signal, and 

the first computer further determines whether or not a relationship between the 
control signal operated in accordance with the first logic function and the simplified 
control signal operated in accordance with the second logic function is normal. 

17. (new) The method according to claim 16, wherein 

the first computer inputs the dummy data to the second logic function to operate a 
dummy simplified control signal and determines whether or not a relationship between 
the dummy simplified control signal and an expected value thereof is normal. 

18. (new) The method according to claim 16, wherein 

the control signal and the simplified control signal, as well as the dummy control 
signal and the expected value thereof, is transmitted to the second computer, and 

the second computer further compares the control signal with the simplified 
control signal to perform a calculation routine for calculating the monitor data for 
monitoring whether or not a result of the determination routine in the first computer is 
correct. 
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19. (new) The method according to claim 15, wherein 
a plurality of types of the dummy data are prepared; 

when the first computer determines that the relationship between the dummy 
control signal and the expected value thereof is normal, the first computer repeats the 
determination routine while changing the plurality of types of dummy data; and 

when the first computer determines that the relationship between the dummy 
control signal and the expected value thereof is abnormal in the previous determination 
routine, the first computer operates the dummy control signal by using the same dummy 
data as that used in the previous determination routine and determines whether or not the 
relationship between the thus calculated dummy control signal and the expected value 
thereof is normal again. 

20. (new) The method according to claim 15, wherein 

in a case where it is determined, in the determination by the first computer 
whether the relationship between the dummy control signal and the expected value 
thereof is normal or abnormal, that the relationship is abnormal a predetermined number 
of times, or in a case where the monitor data indicating that the determination routine by 
the first computer is to determine that the relationship between the dummy control signal 
and the expected value thereof is abnormal is calculated in the second computer a 
predetermined number of times, the abnormal state of the determination routine is settled 
and different fail-safe routines are performed before and after settlement of the abnormal 
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state, respectively. 



21. (new) The method according to claim 20, wherein 

the fail-safe routine allows the output of the control signal to the object of control 
before the settlement of the abnormal state, and prohibits the control of the object of 
control by the control signal after settlement of the abnormal state. 

22. (new) The method according to claim 16, wherein 

in a case where the first computer determines that the relationship between the 
control signal and the simplified control signal is not normal, or in a case where the 
second computer calculates the monitor data indicating that it is to be determined in the 
determination routine by the first computer that the relationship between the control 
signal and the simplified control signal is abnormal, when the first computer determines 
that the relationship between the dummy simplified control signal and the expected value 
thereof is normal and the second computer calculates the monitor data indicating that it is 
to be determined in the determination routine by the first computer that the relationship 
between the dummy simplified signal and the expected value thereof is normal, a fail-safe 
routine is performed for controlling the object of control using the simplified control 
signal. 
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